[PATCH 18/24] doveadm: client-connection - Get API key from per-connection settings
authorAki Tuomi <aki.tuomi@open-xchange.com>
Wed, 4 Mar 2026 12:39:43 +0000 (14:39 +0200)
committerNoah Meyerhans <noahm@debian.org>
Tue, 31 Mar 2026 19:07:17 +0000 (15:07 -0400)
Gbp-Pq: Name CVE-2026-27856-3.patch

src/doveadm/client-connection-http.c

index 5d927d1979c54c50d364cce2a7b192648ab7588f..dfbc3528d7a68a5d666dc295706a3047e1f1d853 100644 (file)
@@ -987,7 +987,7 @@ doveadm_http_server_auth_api_key(struct client_request_http *req,
                                 const struct http_auth_credentials *creds)
 {
        struct client_connection_http *conn = req->conn;
-       const struct doveadm_settings *set = doveadm_settings;
+       const struct doveadm_settings *set = conn->conn.set;
        string_t *b64_value;
 
        if (*set->doveadm_api_key == '\0') {